EnyeLKM blog

Hi.
I almost have finished the new remote access connection hiding system. Before it was done all messy by redirecting read’s syscall, what would sometimes cause errors when doing a netstat. Now I will do it redirecting the function that /proc/net/tcp shows (tcp_seq_show I think it was called), I already redirected it, only need to make the new one that will check if the ip is the one that has to be hidden or not, etc. In a couple of days or less I think it will be ready, there was no need for a slapdash because the symbol to get it redirected is exported. Later when its finished it has to be added to the uninstall module because it has to be left like it was, if not when we do a netstat, it will jump to our function that does not exist and the process will fail.
Greetings.